VDB

CVE-2024-7348

CVE-2024-7348 PUBLISHED CVSS 8.800000190734863 HIGH

A ‘time-of-check time-of-use’ (TOCTOU) race condition in a PostgreSQL can allow an attacker to easily execute arbitrary SQL functions by leveraging a PostgreSQL utility often executed with high privileges.

EPSS 0.74% · 73.4th percentile

Risk Scores

CVSS 3.1
8.800000190734863
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:U/RC:C
EPSS Score
0.74%
73.4th percentile

Affected Products

VendorProductVersions
ABBABB Ability™ Symphony® Plus S+ Engineering 2.3
ABBABB Ability™ Symphony® Plus S+ Engineering 2.4 SP1
ABBABB Ability™ Symphony® Plus S+ Engineering 2.3 RU2
ABBABB Ability™ Symphony® Plus S+ Engineering 2.4
ABBABB Ability™ Symphony® Plus S+ Engineering 2.3 RU1
ABBABB Ability™ Symphony® Plus S+ Engineering 2.4 SP2
ABBABB Ability™ Symphony® Plus S+ Engineering 2.2
ABBABB Ability™ Symphony® Plus S+ Engineering 2.3 RU3

Exploit Intelligence

…and 102 more exploits

Timeline

  • Aug 8, 2024 CVE Published
  • Aug 13, 2024 EPSS Score
  • Aug 22, 2024 CVE Updated
  • Sep 3, 2024 EPSS Score
  • Oct 5, 2024 Coalition ESS Score
  • Oct 14, 2024 EPSS Score
  • Nov 4, 2024 EPSS Score
  • Nov 25, 2024 EPSS Score
  • Dec 17, 2024 EPSS Score
  • Jan 28, 2025 EPSS Score
  • Feb 17, 2025 EPSS Score
  • Mar 10, 2025 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›